Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
File: AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft (raw, json)
Hash identifier: YIC2+hQwgzkKOwFelQBOQ+oSmEnlPbh4zK1pIEMVXQc=
Subject key identifier: 87:36:F0:F8:F9:25:08:A8:97:1C:AD:D0:3F:A2:DD:AE:50:82:AE:B6
Authority key identifier: 01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4
Certificate issuer: /CN=01628a415e1fa72ce1d03cd76219ce1b77c655c4
Certificate serial: 0196C15DDC07D74737ED86E5049557DBC3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
Manifest number: 0BCF
Signing time: Sun 11 May 2025 22:01:15 +0000
Manifest this update: Sun 11 May 2025 22:01:15 +0000
Manifest next update: Mon 12 May 2025 22:01:15 +0000
Files and hashes: 1: AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl (hash: lVXvXRWSC0xFjUWS/1kWbzVGmpbk/3XAzurGaOXWkbA=)
2: xp3MLkw6oQ1O74Xmt4QPNYMRgUo.roa (hash: /pg5KPvZDcy/WFS+OnIBTt8dSXtHgvFhtv8p2k/BYPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:dc:07:d7:47:37:ed:86:e5:04:95:57:db:c3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01628a415e1fa72ce1d03cd76219ce1b77c655c4
Validity
Not Before: May 11 22:01:15 2025 GMT
Not After : May 12 22:01:15 2025 GMT
Subject: CN=8736f0f8f92508a8971cadd03fa2ddae5082aeb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:24:16:54:30:01:ba:a1:6f:5d:26:57:c7:c6:
12:3c:52:c7:03:f4:49:24:ca:8a:0e:f6:02:2d:39:
2e:26:d5:0b:a4:99:17:66:a6:77:82:c0:69:10:37:
7d:a4:0c:0e:c4:b4:1b:f6:49:28:f1:4c:c3:23:00:
e7:95:49:00:d8:e9:76:51:13:0f:e0:20:39:2a:e1:
59:64:e2:85:eb:c5:1b:f0:8d:09:5b:21:b3:2a:11:
28:9d:64:a2:7a:f4:4b:5c:0f:bf:d7:02:bb:db:d8:
80:2f:c2:b5:31:1c:ae:71:78:ce:48:86:d0:52:32:
1c:6b:4b:fc:dd:2a:63:c0:30:86:50:2a:e8:95:b7:
62:0c:f1:04:40:3a:16:4b:59:08:e5:26:66:57:37:
d0:45:21:8f:e8:df:1a:1f:0e:f4:c8:b3:02:df:86:
ad:4e:c5:ab:77:94:dd:88:91:61:b4:b5:5f:a7:7b:
de:1d:0d:5c:bc:cc:7f:b6:cc:dd:82:6e:91:54:37:
41:a0:15:7f:71:0d:16:df:b5:24:22:7e:99:fd:62:
6c:9b:13:89:c8:55:7b:d0:a9:d5:7d:a7:d2:5a:62:
c0:27:4f:2c:fc:7f:b1:b8:6e:55:d6:4e:1c:c5:60:
09:07:1e:c8:85:3e:21:5c:b9:1f:1e:0e:af:59:10:
10:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:36:F0:F8:F9:25:08:A8:97:1C:AD:D0:3F:A2:DD:AE:50:82:AE:B6
X509v3 Authority Key Identifier:
keyid:01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fe:12:e9:f3:41:83:ac:29:ee:14:b6:84:e0:2f:5a:c7:2a:
f1:27:00:50:e4:9e:18:88:31:7f:ce:c6:bb:db:ec:1f:95:ca:
50:3b:5a:03:f6:c9:4c:03:2e:bf:b0:7f:3f:97:9d:bf:20:7c:
38:a8:50:b0:66:4c:2a:d3:59:b5:4e:36:ed:da:c1:b6:9e:4c:
40:bc:23:33:04:88:ea:31:92:23:07:03:ae:f1:7c:99:a1:f2:
1c:ab:95:83:5e:72:b5:ad:95:0d:b8:ef:56:62:03:8b:f1:14:
d4:01:62:b2:2d:40:b0:50:d5:81:70:b6:db:67:99:04:27:cc:
6b:30:74:2a:b1:ed:54:54:80:3b:fc:f3:84:75:4c:ca:2e:90:
02:67:17:c7:a7:29:11:61:b7:ff:ae:d8:73:73:05:ea:c3:17:
3a:47:cf:12:99:1a:c4:4b:61:96:65:07:02:77:f7:c3:f9:15:
5c:70:fe:84:69:8e:21:9d:12:01:97:7e:2f:2f:86:03:d1:73:
8e:e9:73:8f:8b:3a:6e:d9:b5:cb:f7:e3:8f:d2:ee:74:8f:2e:
a6:e5:e2:0f:a1:a4:93:b5:d5:c1:6e:ef:54:71:ae:f0:57:c3:
7b:e9:57:01:da:2e:db:7e:3e:35:b0:dd:22:89:98:00:07:de:
8c:a1:6a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:20:47 2025 by rpki-client